
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
File: UjrFjamEDQscqom9_54NzkZ2fEo.mft (raw, json)
Hash identifier: lGfAXI2LiWbG+ggUYX/QAsJETIgplE7er16UIK10+vk=
Subject key identifier: 90:4D:3B:CB:61:38:C7:FB:A3:DD:CF:F2:3A:50:69:EE:57:54:38:50
Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
Certificate issuer: /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
Manifest number: E3
Signing time: Sun 01 Mar 2026 07:42:40 +0000
Manifest this update: Sun 01 Mar 2026 07:42:40 +0000
Manifest next update: Sun 08 Mar 2026 07:42:40 +0000
Files and hashes: 1: UjrFjamEDQscqom9_54NzkZ2fEo.crl (hash: F8/XR/VXtAW653vle4qFWBupC2zos9/k4gLRAAX4TJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Validity
Not Before: Mar 1 07:42:40 2026 GMT
Not After : Mar 8 07:42:40 2026 GMT
Subject: CN=69a3edf0-072c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:a5:8f:10:41:4b:3e:4a:67:11:fa:b8:9f:
d0:4d:55:2c:83:92:78:46:f5:db:c5:b3:25:0e:3b:
16:c6:11:a2:27:5d:88:50:42:f6:e4:c4:4d:22:47:
31:39:fe:f1:7f:e2:eb:ab:f2:35:c9:f3:38:95:93:
21:a4:03:20:54:11:23:14:09:55:64:99:99:8d:c9:
bd:dc:67:b8:99:a4:3b:80:20:a7:31:1b:8f:a4:59:
ef:0a:63:55:40:fd:35:72:55:d5:6d:f0:10:9c:2b:
ea:14:83:a8:8f:dd:5a:67:f4:27:ad:6a:3a:bf:77:
93:8b:51:5d:1b:80:22:ff:20:bf:f5:f7:fa:92:5f:
ea:17:56:3b:39:bc:c3:e9:71:bf:5a:fe:b6:c6:3b:
67:ee:1b:8b:9f:91:01:67:48:7c:cf:93:be:f7:b6:
c2:e3:33:29:f1:65:32:63:5c:ea:3c:45:ad:61:11:
3f:d4:d8:4e:bf:70:7d:f4:fc:62:6b:f3:a3:68:ca:
f4:5c:4f:6f:fb:ae:42:10:bc:86:f2:19:7f:0a:10:
e9:cd:46:60:69:ee:04:82:f8:09:55:62:72:99:40:
1f:ad:a2:04:e0:93:14:94:71:19:2f:e7:8c:31:27:
d3:77:8b:e4:61:5d:02:48:aa:09:ed:2e:57:79:98:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:3B:CB:61:38:C7:FB:A3:DD:CF:F2:3A:50:69:EE:57:54:38:50
X509v3 Authority Key Identifier:
keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:99:fa:29:b7:9f:e9:2b:d8:e6:f3:9b:63:66:34:5e:19:da:
1e:b1:76:fe:f0:7d:68:f2:6c:43:c1:4e:96:d9:b2:ec:7c:ec:
95:86:9f:9b:77:5b:16:e4:4e:39:63:e3:24:eb:03:fa:f9:89:
93:4a:ee:71:3c:cd:ec:f7:ef:4d:79:31:0c:89:ed:cf:2c:e0:
8f:0d:9b:e9:b1:9d:f9:c4:05:0d:c4:8d:40:c9:e7:7a:fe:ad:
f1:98:f9:e8:72:39:da:11:f2:64:35:7d:09:53:8f:1a:26:6f:
eb:6a:49:af:2e:d9:98:d2:f4:54:d8:be:07:60:3e:3d:0c:60:
38:98:f4:1e:94:ea:cd:49:cb:c5:fe:4a:80:86:c5:df:ca:f7:
73:c8:80:6b:e9:50:b2:06:71:1d:1a:ed:5a:22:2d:5b:a6:3f:
03:74:6f:b8:c9:46:66:44:69:31:be:88:fb:88:48:4d:96:85:
58:07:aa:a3:1e:f8:03:fe:62:f4:d7:1c:be:29:80:fd:4d:99:
e5:5c:0f:6b:b7:db:ea:c6:8c:fd:d7:94:62:44:7d:8a:d0:6e:
dc:0b:da:a3:e6:45:5f:80:7f:e5:fe:09:06:3e:45:7a:78:37:
41:9c:7a:9d:53:aa:77:91:54:8e:95:85:da:e2:44:d3:81:9d:
80:3b:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:15:06 2026 by rpki-client